Hello Ajay,
You need to control these things in the search query where you get the result.
If they are already extracted records.
Search name!="john"|chart...
OR
Search ...|where name!="john"|chart...
Thanks,
L
Hello Ajay,
You need to control these things in the search query where you get the result.
If they are already extracted records.
Search name!="john"|chart...
OR
Search ...|where name!="john"|chart...
Thanks,
L
thanks Abishek 🙂